Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler.Check if you run itEPSS 0.67%May 19, 2026
- Critical9.1An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console.Check if you run itEPSS 0.83%May 19, 2026
- High7.7Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint.Check if you run itEPSS 0.66%May 19, 2026
- High8.7Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role.Check if you run itEPSS 0.43%May 19, 2026
- High7.1A flaw was found in Keycloak.Check if you run itEPSS 0.50%May 19, 2026
- High7.5A session fixation vulnerability was found in Keycloak's login-actions endpoints.Check if you run itEPSS 1.10%May 19, 2026
- High8.1A flaw was found in Keycloak's URL validation logic during redirect operations.Check if you run itEPSS 0.50%May 19, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.38%May 19, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum server registration per node Current code does no bound checking o…Check if you run itEPSS 0.15%May 19, 2026
- Medium6.5A flaw was found in Keycloak.Check if you run itEPSS 0.41%May 19, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.46%May 19, 2026
- Medium5.4A flaw was found in Keycloak.Check if you run itEPSS 0.32%May 19, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.44%May 19, 2026
- High7.8Mullvad VPN is a VPN client app for desktop and mobile.Check if you run itEPSS 0.12%May 19, 2026
- Critical9.3Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-mi…Check if you run itEPSS 0.80%May 18, 2026
- High8.6FreePBX is an open source IP PBX.Check if you run itEPSS 0.97%May 18, 2026
- Low2.4Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control…Check if you run itEPSS 0.15%May 18, 2026
- Medium5.3DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that ar…Check if you run itEPSS 0.31%May 18, 2026
- High7.5In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles protocol violations during CONNECT packet parsing.Check if you run itEPSS 0.28%May 18, 2026
- High7.7A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks.Check if you run itEPSS 0.70%May 18, 2026
- Low3.5Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from closing an underlying application view in the Mattermost Desktop App…Check if you run itEPSS 0.29%May 18, 2026
- Low3.8Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an a…Check if you run itEPSS 0.12%May 18, 2026
- Low2.1A flaw has been found in Kilo-Org kilocode up to 7.0.47.Check if you run itEPSS 0.32%May 17, 2026
- Low0.9A security flaw has been discovered in Oinone Pamirs up to 7.2.0.Check if you run itEPSS 0.21%May 17, 2026
- Low2.1A vulnerability has been found in Open5GS up to 2.7.7.Check if you run itEPSS 0.68%May 17, 2026